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DETAILED ACTION 



This action is in response to the application filed on February 24, 2010. Claims 1, 3-5, 7- 
9, 11-13, 15, 16, 19, and 20 are currently being considered. 

Response to Arguments 

Applicant's arguments filed February 24, 2010 with respect to claims 1, 3-5, 7-9, 11-13, 
15, 16, 19, and 20 have been considered but arc moot in view of the new ground(s) of rejection. 

Allowable Subject Matter 

Claims 3 and 1 1 are objected to as being dependent upon a rejected base claim, but would 
be allowable if rewritten in independent form including all of the limitations of the base claim 
and any intervening claims. 



Claim Rejections - 35 USC §102 

The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application lor patent in the United States. 
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Claim 1, 4-5, 7-9, 12-13, 15, 16, 19, and 20 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Kimichi et al. (U.S. Publication No.: 2002/0120760). 

1 . Regarding Claim 1 Kimchi reach and describe a key distribution method applied in the 
Next Generation Network comprising a terminal, a soft switch and an authentication center, 
comprising: the terminal sending a registration request message to the soft switch for a 
registration; the soft switch sending the authentication request message to the authentication 
center for the authentication for the terminal; and the authentication center authenticating the 
terminal, generating a session key for the terminal and the soft switch, and upon a successful 
registration authentication, sending the session key to the soft switch so as to be distributed to the 
terminal upon a successful authentication (Fig.3c, [0035-0036, 0271-0279, 0384-0396]) 

wherein the step of the authentication center authenticating the terminal comprises: the 
authentication center generating a first verification word for the terminal according to a key Kc 
shared with the terminal, encrypting the session key with the shared key Kc, and returning the 
encrypted session key and the first verification word to the soft switch; the soft switch returning 
a registration failure response message to the terminal to notify the terminal of a registration 
failure; the terminal generating a second verification word according to the key Kc shared with 
the authentication center, and sending a registration message containing the second verification 
word to the soft switch for a registration again; and the soft switch authenticating the terminal 
according to the first verification word and the second verification word ([0029-0036, 0271- 
0279, 0384-0396]). 

2. Regarding Claim 9 Kimchi teach and describe a key distribution method applied in the 
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Next Generation Network comprising a terminal, a signaling proxy, a soft switch and an 
authentication center, comprising: the terminal sending a registration request message through 
the signaling proxy to the soft switch for a registration; the soft switch sending the authentication 
request message to the authentication center for the authentication for the terminal; and the 
authentication center authenticating the terminal, generating a session key for the terminal and 
the signaling proxy, and upon a successful registration authentication, sending the session key to 
the soft switch so as to be distributed through the signaling proxy to the terminal upon a 
successful authentication (Fig.3c, [0035-0036, 0271-0279, 0384-0396]) 

wherein the step of the authentication center authenticating the terminal comprises: the 
authentication center generating a first verification word for the terminal according to a key Kc 
shared with the terminal, encrypting the session key with the shared key Kc, and returning the 
encrypted session key and the first verification word to the soft switch; the soft switch returning 
a registration failure response message to the terminal to notify the terminal of a registration 
failure; the terminal generating a second verification word according to the key Kc shared with 
the authentication center, and sending a registration message containing the second verification 
word to the soft switch for a registration again; and the soft switch authenticating the terminal 
according to the first verification word and the second verification word ([ 0029-0036, 0271- 
0279, 0384-0396]). 

3. Regarding Claim 19 Kimchi teach and describe a key distribution system applied in the 
Next Generation Network comprising: a terminal adapted to send a registration request message 
for a registration; 
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a soft switch adapted to receive the registration request message sent from the terminal and sent 
an authentication request message for the authentication for the terminal; and 
an authentication center adapted to receive the authentication request message sent from the soft 
switch, to authenticate the terminal, to generate a session key for the terminal and the soft switch, 
and to send the session key to the soft switch so as to be distributed to the terminal upon a 
successful authentication (Fig.3c, [0035-0036, 0271-0279, 0384-0396]); 

wherein the authentication center is further to adapted to generate a first verification word for the 
terminal according to a key Kc shared with the terminal, to encrypt the session key with the 
shared key Kc, and to return the encrypted session key and the first verification word to the soft 
switch; wherein the soft switch is further to adapted to return a registration failure response 
message to the terminal to notify the terminal of a registration failure, and to authenticate the 
terminal according to the first verification word and a second verification word; and wherein the 
terminal is further to adapted to generate the second verification word according to the key Kc 
shared with the authentication center, and to send a registration message containing the second 
verification word to the soft switch for a registration again([ 0029-0036, 0271-0279, 0384- 
0396]). 



4. Regarding Claim 20 Kimchi teach and describe a key distribution system applied in the 
Next Generation Network comprising: a terminal adapted to send a registration request message 
for a registration; 

a signaling proxy adapted to forward the registration request message from the terminal, and to 
distribute a session key to the terminal; a soft switch adapted to receive the registration request 
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message sent from the terminal through the signaling proxy and sent an authentication request 
message for the authentication for the terminal; and an authentication center adapted to receive 
the authentication request message sent from the soft switch, to authenticate the terminal, to 
generate the session key for the terminal and the signaling proxy, and to send the session key to 
the soft switch so as to be distributed through the signaling proxy to the terminal upon a 
successful authentication (Fig.3c, [0035-0036, 0271-0279, 0384-0396]); 
wherein the authentication center is further adapted to generate a first verification word for the 
terminal according to a key Kc shared with the terminal and a key Ksp shared with the signaling 
proxy, to encrypt the session key respectively with the shared key Kc and the shared key Ksp, 
and to return the encrypted session key and the first verification word to the soft switch 
wherein the soft switch is further adapted to return a registration failure response message 
through the signaling proxy to the terminal to notify the terminal of a registration failure, and to 
authenticate the terminal according to the first verification word and a second verification word; 
and wherein the terminal is further adapted to generate the second verification word according to 
the key Kc shared with the authentication center, and to send a registration message containing 
the second verification word to the signaling proxy to be forwarded to the soft switch for a 
registration again ([ 0029-0036, 0271-0279, 0384-0396]). 



5. Claims 2, 4-8, 10, 12-16, and 19-20 are rejected applied as above rejecting Claim 1, and 
9. Furthermore, Kimchi teach and describe a countermeasure method, wherein: 
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As per Claim 4, the method further comprises: the terminal sending to the soft switch a 
list of security mechanisms supported by the terminal and priority information of each security 
mechanism; the soft switch choosing an appropriate security mechanism for communication 
according to the list of security mechanisms and the priority information of each security 
mechanism of the terminal ([0029-0036, 0271-0279, 0384-0396]). 

As per Claim 5, the registration request message and the registration message are SIP 
protocol registration messages, the registration failure response message is a SIP protocol 
response message; or wherein the registration request message is a system restart message and a 
corresponding response message in the MGCP protocol, the registration failure response 
message is a notification request message and a corresponding response message in the MGCP 
protocol, and the registration message comprises a notification message and a corresponding 
response message in the MOCP protocol; or wherein the registration request message comprises 
a system service status change message and a corresponding response message in the H.248 
protocol, the registration failure response message is attribute modification message and a 
corresponding response message in the H.248 protocol, and the registration message comprises a 
notification message and a corresponding response message in the H.248 protocol; or wherein 
the registration failure response message is a gatekeeper rejection message in the H.323 protocol, 
the registration failure response message is a gatekeeper rejection message in the H.323 protocol, 
the registration message is a registration request message in the H.323 protocol ([0019-0036, 
0271-0279, 0384-0396]). 

As per Claim 7, the registration request message and the registration message are SIP 
protocol registration messages, the registration failure response message is a SIP protocol 
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response message, and the registration success response message is a SIP protocol registration 
request success message; or wherein the registration request message is a system restart message 
and a corresponding response message in the MGCP protocol, the registration failure response 
message and the registration success response message are a notification request message and a 
corresponding response message in the MGCP protocol, and the registration message comprises 
a notification message and a corresponding response message in the MGCP protocol; or wherein 
the registration request message comprises a system service status change message and a 
corresponding response message in the H.248 protocol, the registration failure response message 
and the registration success response message arc an attribute modification message and a 
corresponding response message in the H.248 protocol, and the registration message comprises a 
notification message and a corresponding response message in the H.248 protocol; or wherein 
the registration request message is a gatekeeper request message in the H.323 protocol, the 
registration failure response message is a gatekeeper rejection message in the H.323 protocol, the 
registration message is a registration request message in the H.323 protocol, and the registration 
success response message is a registration success message in the H.323 protocol ([0019-0036, 
0271-0279, 0384-0396]). 

As per Claim 8, the registration request message and the registration message are SIP 
protocol registration messages, the registration failure response message is a SIP protocol 
response message, and the registration success response message is a SIP protocol registration 
request success message; or wherein the registration request message is a system restart message 
and a corresponding response message in the MGCP protocol, the registration failure response 
message and the registration success response message are a notification request message and a 
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corresponding response message in the MGCP protocol, and the registration message comprises 
a notification message and a corresponding response message in the MGCP protocol; or wherein 
the registration request message comprises a system service status change message and a 
corresponding response message in the H.248 protocol, the registration failure response message 
and the registration success response message are an attribute modification message and a 
corresponding response message in the H.248 protocol, and the registration message comprises a 
notification message and a corresponding response message in the H.248 protocol; or wherein 
the registration request message is a gatekeeper request message in the H.323 protocol, the 
registration failure response message is a gatekeeper rejection message in the H.323 protocol, the 
registration message is a registration request message in the H.323 protocol, and the registration 
success response message is a registration success message in the H.323 protocol ([0019-0036, 
0271-0279, 0384-0396]). 

As per Claim 12, the method further comprise: the terminal sending to the signaling 
proxy a list of security mechanisms supported by the terminal and priority information of each 
security mechanism, and the signaling proxy choosing an appropriate security mechanism for 
communication according to the security mechanisms supported by the terminal and the priority 
information of each security mechanism ([0029-0036, 0271-0279, 0384-0396]). 

As per Claim 13, the registration request message and the registration message are SIP 
protocol registration messages, the registration failure response message is a SIP protocol 
response message; or wherein the registration request message comprises a system restart 
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message and a corresponding response message in the MGCP protocol, the registration failure 
response message is a notification request message and a corresponding response message in the 
MGCP protocol, and the registration message comprises a notification message and a 
corresponding response message in the MGCP protocol; or wherein the registration request 
message comprises a system service status change message and a corresponding response 
message in the H.248 protocol, the registration failure response message is an attribute 
modification message and a corresponding response message in the H.248 protocol, and the 
registration message comprises a notification message and a corresponding response message in 
the H.248 a protocol; or wherein the registration request message is a gatekeeper request 
message in the H.323 protocol, the registration failure response message is a gatekeeper rejection 
message in the H.323 protocol, the registration message is a registration request message in the 
H.323 protocol, and the registration success response message is a registration success message 
in the H.323 protocol ([0019-0036, 0271-0279, 0384-0396]). 

As per Claim 15, the registration request message and the registration message are SIP 
protocol registration messages, the registration failure response message is a SIP protocol 
response message, and the registration success response message is a SIP protocol registration 
request success message; or wherein the registration request message comprises a system restart 
message and a corresponding response message in the MGCP protocol, the registration failure 
response message and the registration success response message are a notification request 
message and a corresponding response message in the MGCP protocol, and the registration 
message comprises a notification message and a corresponding response message in the MGCP 
protocol; or wherein the registration request message comprises a system service status change 
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message and a corresponding response message in the H.248 protocol, the registration failure 
response message and the registration success response message are an attribute modification 
message and a corresponding response message in the H.248 protocol, and the registration 
message comprises a notification message and a corresponding response message in the H.248 
protocol; or wherein the registration request message is a gatekeeper request message in the 
H.323 protocol, the registration failure response message is gatekeeper rejection message in 
H.323 protocol, the registration message is a registration request message in the H.323 protocol, 
and the registration success response message is a registration success message in the H.323 
protocol ([0019-0036, 0271-0279, 0384-0396]). 

As per Claim 16, the registration request message and the registration message are SIP 
protocol registration messages, the registration failure response message is a SIP protocol 
response message, and the registration success response message is a SIP protocol registration 
request success message; or wherein the registration request message comprises a system restart 
message and a corresponding response message in the MGCP protocol, the registration failure 
response message and the registration success response message are a notification request 
message and a corresponding response message in the MGCP protocol, and the registration 
message comprises a notification message and a corresponding response message in the MGCP 
protocol; or wherein the registration request message comprises a system service status change 
message and a corresponding response message in the H.248 protocol, the registration failure 
response message and the registration success response message are an attribute modification 
message and a corresponding response message in the H.248 protocol, and the registration 
message comprises a notification message and a corresponding response message in the H.248 
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protocol; or wherein the registration request message is a gatekeeper request message in the 
H.323 protocol, the registration failure response message is a gatekeeper rejection message in the 
H.323 protocol, the registration message is a registration request message in the H.323 protocol, 
and the registration success response message is a registration success message in the H.323 
protocol ([0019-0036, 0271-0279, 0384-0396]). 



Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to SYED ZIA whose telephone number is (571)272-3798. The 
examiner can normally be reached on 9:00 to 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William R. Korzuch can be reached on 571-272-7589. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

sz 

May 15,2010 
/Syed Zia/ 

Primary Examiner, Art Unit 243 1 



